11 Jun
2011
11 Jun
'11
5:58 p.m.
On Sat, Jun 11, 2011 at 07:21:53PM +0200, tagnaq wrote:
On 06/11/2011 06:59 PM, tagnaq wrote:
Hmm. I wonder what happens if the packets are fragmented so that the TCP port information isn't in the first fragment...
An IP packet must be very small to fulfil this scenario (first IP fragment is so small that it is not able enclose the entire TCP header). IP hosts are required to be able to handle at least 576 bytes.
Yes, but the client (say, inside China) is perfectly capable of artificially fragmenting its SYN packet. It shouldn't be too hard to check what actually happens in this case? (At least, for the current GFW configuration.)
- Ian